System and method for generating unique passwords

Abstract

A computerized method is provided for generating passwords for password controlled access points. Provided are a master password, an access password, and a user name. The master password, the service name, and the user name are combined using an irreversible function to generate a unique password. The function can be a one-way hash function. The combining can be performed by a browser of a client computer. A similar combining can also be used to generate a user name from the master password and the user's real name.

What is claimed is: 
     
       1. A computerized method for generating passwords for password controlled access points, comprising the steps of: receiving a master password, a service name, and a user name; and   generating a unique password at a local terminal by combining the master password, the service name, and the user name.   
     
     
       2. The method of claim 1 wherein the generating step uses an irreversible function. 
     
     
       3. The method of claim 2 wherein the function is a first one-way hash function. 
     
     
       4. The method of claim 1 wherein the combining step is performed by a browser of a client computer. 
     
     
       5. The method of claim 1 wherein the generating step is performed by an applet of a client computer. 
     
     
       6. The method of claim 1 wherein the service name is expressed in canonical form. 
     
     
       7. The method of claim 1 wherein the user name is derived by combining the master password and a real name of a user. 
     
     
       8. The method of claim 7 wherein the generating step uses a second one-way hash function. 
     
     
       9. The method of claim 1 further comprising the steps of: maintaining a plurality of service names within the local computer, each service name corresponding to one of the password controlled access points; and   retrieving at least one service name for use in generating the unique password.   
     
     
       10. The method of claim 9 wherein the plurality of service names are automatically created by the local terminal. 
     
     
       11. The method of claim 9 wherein the plurality of service names are created by a user. 
     
     
       12. A computer apparatus for generating passwords comprising: a local computer; a receiving module adapted to receive a master password, a service name and a user name;   a generation module adapted to generate a unique password at the local computer by combining the master password, the service name, and the user name.     
     
     
       13. The computer apparatus of claim 12 wherein the generation module is adapted to implement an irreversible function adapted to generate the unique password by combining the master password, the service name, and the user name. 
     
     
       14. The computer apparatus of claim 12 further comprising a browser applet within the local computer, said browser applet adapted to generate the unique password by combining the master password, the service name and the user name. 
     
     
       15. The computer apparatus of claim 12 wherein the generation module is adapted to implement a plurality of irreversible functions adapted to generate the unique password by combining the master password, the service name and the user name. 
     
     
       16. The computer apparatus of claim 12 further comprising a storage module adapted to store a plurality of service names within the local computer. 
     
     
       17. A computer program product comprising: a computer usable medium having computer readable code embodied therein for causing the generation of a unique password, the computer program product including: computer readable program code devices configured to cause a local computer to effect the reception of a master password, a service name and a user name;   computer readable program code devices configured to cause the local computer to effect the generation of the unique password at the local computer by combining the master password, the service name, and the user name.     
     
     
       18. The computer program product of claim 17 further including a computer readable program code device configured to cause the local computer to effect the storage of a plurality of service names and a computer readable program code device configured to retrieve at least one of the service names for use in the generation of the unique password. 
     
     
       19. The computer program product of claim 17 further including a computer readable program code device configured to use an irreversible function to generate the unique password from the combination of the user name, the service name and the master password. 
     
     
       20. The computer program product of claim 17 further including a computer readable program code device configured to use a browser applet contained within the local computer to generate the unique password from the combination of the user name, the service name and the master password.